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Abstract 

A line of work initiated by Terhal and DiVincenzo OTD02II and Bremner, Jozsa, and Shepherd 
flBJSlOL shows that restricted classes of quantum computation can efficiently sample from probability 
distributions that cannot be exactly sampled efficiently on a classical computer, unless the PH collapses. 
Aaronson and Arkhipov flAA13l take this further by considering a distribution that can be sampled ef¬ 
ficiently by linear optical quantum computation, that under two feasible conjectures, cannot even be 
approximately sampled classically within bounded total variation distance, unless the PH collapses. 

In this work we use Quantum Fourier Sampling to construct a class of distributions that can be 
sampled exactly by a quantum computer. We then argue that these distributions cannot be approximately 
sampled classically, unless the PH collapses, under variants of the Aaronson-Arkhipov conjectures. 

In particular, we show a general class of quantumly sampleable distributions each of which is 
based on an “Efficiently Specifiable” polynomial, for which a classical approximate sampler implies 
an average-case approximation. This class of polynomials contains the Permanent but also includes, for 
example, the Hamiltonian Cycle polynomial, as well as many other familiar ^P-hard polynomials. 

Since our distribution likely requires the full power of universal quantum computation, while the 
Aaronson-Arkhipov distribution uses only linear optical quantum computation with noninteracting bosons, 
why is this result interesting? We can think of at least three reasons; 

1. Since the conjectures required in IIAA131 have not yet been proven, it seems worthwhile to weaken 
them as much as possible. We do this in two ways, by weakening both conjectures to apply 
to any “Efficiently Specifiable” polynomial, and by weakening the so-called Anti-Concentration 
conjecture so that it need only hold for one distribution in a broad class of distributions. 

2. Our construction can be understood without any knowledge of linear optics. While this may be a 
disadvantage for experimentalists, in our opinion it results in a very clean and simple exposition 
that may be more immediately accessible to computer scientists. 

3. It is extremely common for quantum computations to employ “Quantum Eourier Sampling” in the 
following way; first apply a classically efficient function to a uniform superposition of inputs, then 
apply a Quantum Eourier Transform followed by a measurement. Our distributions are obtained in 
exactly this way, where the classically efficient function is related to a (presumed) hard polynomial. 
Establishing rigorously a robust sense in which the central primitive of Quantum Eourier Sampling 
is classically hard seems a worthwhile goal in itself. 
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1 Introduction 


Nearly twenty years after the discovery of Shor’s factoring algorithm IISho941l that caused an explosion of 
interest in quantum computation, the complexity theoretic classification of quantum computation remains 
embarrassingly unsettled. 

The foundational results of Bernstein and Vazirani IIBV97I . Adleman, DeMarrais, and Huang IIADH971I . 
and Bennett, Bernstein, Brassard and Vazarani IIBBBV97II laid the groundwork for quantum complexity 
theory by defining BQP as fhe class of problems solvable wifh a quanfum computer in polynomial lime, 
and eslablished fhe upper bound, BQP C PP, which hasnT been improved since. 


In particular, given lhaf BPP C BQP, so quanfum compulers are surely no less powerful fhan Iheir classi¬ 
cal counterparts, if is nalural fo compare fhe power of efficienl quanfum compulation lo fhe power of efficienl 
classical verification. Can every problem wifh an efficienl quanfum algorifhm be verified efficienfly? Like¬ 
wise can every problem whose solution can be verified efficienfly be solved quanlumly? In complexify 
Iheorelic terms, is BQP C NP, and is NP C BQP? Factoring is confained in NP n coNP, and so 
cannol be NP-hard unless NP = coNP and fhe PH collapses. Thus, while being a problem of profound 
pracfical imporlance, Shor’s algorifhm does nol give evidence lhaf NP C BQP. 

Even progress towards oracle separations has been agonizingly slow. These same works lhaf defined BQP 
eslablished an oracle for which NP <f_ BQP IIBBBV97II and BQP NP IIBV971 . This Iasi resull 
can be improved to show an oracle relative lo which BQP MA IIBV97L buf even finding an oracle 
relafive lo which BQP AM is still wide open. This is particularly troubling given that, under widely 
believed complexity assumptions, NP = MA = AM IIKvM02ll . Thus, our failure to provide an oracle 
relative to which BQP AM indicates a massive lack of understanding of the classical power of quantum 
computation. 


Recently, two candidate oracle problems with quantum algorithms have been proven to not be contained in 
the PH, assuming plausible complexity theoretic conjectures IIAarlOal IFUIII ^ These advances remain at 
the forefront of progress on these questions. 


A line of work initiated by DiVincenzo and Terhal IITD02I . Bremner, Jozsa and Shepherd IBJSIOI . and 
Aaronson and Arkhipov BAA 1311 asks whether we can provide a theoretical basis for quantum superiority by 
looking at distribution sampling problems. In particular, Aaronson and Arkhipov show a distribution that 
can be sampled efficiently by a particular limited form of quantum computation, that assuming the validity 
of two feasible conjectures, cannot be approximately sampled classically (even by a randomized algorithm 
with a PH oracle), unless the PH collapses. The equivalent result for decision problems, establishing 
BQP BPP unless the PH collapses, would be a crowning achievement in quantum complexity theory. 
In addition, this research has been very popular not only with the theoretical community, but also with 
experimentalists who hope to perform this task, “Boson Sampling”, in their labs. Experimentally, it seems 
more pressing to analyze the hardness of approximate quantum sampling, since it is unreasonable to expect 
that any physical realization of a quantum computer can itself exactly sample from the quantum distribution. 


Interestingly, it is also known that if we can find such a quantumly sampleable distribution for which no 
classical approximate sampler exists, there exists a “search” problem that can be solved by a quantum 

'Although the “Generalized Linial-Nisan” conjecture proposed in lAarlOal is now known to be false lAarlObl . 
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computer that cannot be solved classically BAarlOcll . In a search problem we are given an input x E {0,1}", 
and our goal is to output an element in a nonempty set, C {0, with high probability. This 

would be one of the strongest pieces of evidence to date that quantum computers can outperform their 
classical counterparts. 

In this work we use the same general algorithmic framework used in many quantum algorithms, which we 
refer to as “Quantum Fourier Sampling”, to demonstrate the existence of a general class of distributions 
that can be sampled exactly by a quantum computer. We then argue that these distributions shouldn’t be 
able to be approximately sampled classically, unless the PH collapses. Perhaps surprisingly, we obtain and 
generalize many of the same conclusions as Aaronson and Arkhipov IIAA13II with a completely different 
class of distributions. 

Additionally, recently, and independent of us, an exciting result by Bremner, Montanaro and Shepherd 
1BMS151I obtains similar quantum “approximate sampling” results under related but different conjectures. 
While our hardness conjectures apply to a broad class of hard “polynomials”, their distribution can be 
sampled by a class of commuting quantum computations known as Instantaneous Quantum Polynomial 
time, or IQP, whereas our results likely require the full power of universal quantum computation. 


2 Overview 

2.1 Our Goals 

We want to find a class of distributions that can be sampled quantumly that cannot be approximately sam¬ 
pled classically, unless the PH collapses. A natural methodology toward showing this is to prove that the 
existence of a classical approximate sampler implies that a ^P-hard function can be computed in the PH. 
By Toda’s Theorem llTod9Hl . this would imply a collapse of the PH. 

In this work, we demonstrate a class of distributions that can be sampled exactly on a quantum computer. We 
prove that the existence of an approximate sampler for these distributions implies an approximate average 
case solution to an “Efficiently Specifiable” polynomial. An Efficienlly Specifiable polynomial is informally 
a polynomial in which fhe variables in each monomial can be compufed efficienlly from fhe index of fhe 
monomial. This includes, among ofhers, fhe Permanenf and Hamiltonian Cycle polynomial. 

Computing a multiplicative approximation to the Permanent with integer entries in the worst-case is #P- 
hard, and computing the Permanent on average is ^P-hard (see IIAA13I for more details). The challenge to 
proving our conjectures is to put these two together to prove that an average-case multiplicative approxima¬ 
tion to the Permanent (or for that matter, any Efficiently Specifiable polynomial) is still a ^P-hard problem. 
Since we can’! prove fhese conjecfures, and we don’l know fhe ingredienls such a proof will require, if seems 
worfhwhile fo allempf fo generalize fhe class of disfribufions fhaf can be sampled quanfumly. 
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2.2 Our Results 


In Section m we define a general class of distributions that can be sampled exactly on a quantum computer. 
The probabilities in these distributions are proportional to each different {±1}” evaluation of a particular 
Efficiently Specifiable polynomial (see Definition O with n variables. We then show in Section [5] that the 
existence of an approximate classical sampler for these distributions implies the existence of an additive 
approximate average-case solution to the Efficiently Specifiable polynomial. We generalize fhis in Section 
13 to prove that quantum computers can sample from a class of distributions in which each probability is 
proportional to polynomially bounded integer evaluations of an Efficiently Specifiable polynomial. 

We fhen affempt to extend this result to quantumly sample from a distribution with probabilities proportional 
to exponentially bounded integer evaluations of Efficiently Specifiable polynomials. To do this, in Section|7j 
we introduce a variant of the Quantum Eourier Transform which we call the “Squashed QET”. We explicitly 
construct this unitary operator, and show how to use it in our quantum sampling framework. We leave as an 
open question whether this unitary can be realized by an efficient quantum circuit. We then prove in Section 
|9j using a similar argument to Section |5l that if we had a classical approximate sampler for this distribution 
we’d have an additive approximate average-case solution to the Efficiently Specifiable polynomial with 
respect to the binomial distribution over exponentially bounded integers. 

In Section [To] we conclude with conjectures needed to establish the intractability of approximate classical 
sampling from any of our quantumly sampleable distributions. As shown in Sections |5] and [3 it suffices to 
prove that an additive approximate average-case solution to any Efficiently Specifiable polynomial is #P- 
hard, and we conjecfure that this is possible. We also propose an “Anti-concentration conjecture” relative to 
an Efficiently Specifiable polynomial over the binomial distribution, which allows us to reduce the hardness 
of a multiplicative approximate average-case solution to an additive approximate average-case solution. 
Assuming this second conjecture, we can then base our first conjecture around the hardness of multiplicative, 
rather than additive approximate average-case solutions to an Efficiently Specifiable polynomial. 

Our conjectures generalize conjectures in Aaronson and Arkhipov’s results BAA 1311 . They conjecture that 
an additive approximate average-case solution to the Permanent with respect to the Gaussian distribution 
with mean 0 and variance 1 is #P-hard. They further propose an “Anti-concentration” conjecture which 
allows them to reduce the hardness of multiplicative approximate average-case solutions to the Permanent 
over the Gaussian distribution to the hardness of additive average case solutions to the Permanent over the 
Gaussian distribution. The parameters of our conjectures match the parameters of theirs, but our conjectures 
are broader, applying to any Efficiently Specifiable polynomial, a class which includes the Permanent, and 
a wider class of distributions, and thus is formally easier to prove. 


3 Quantum Preliminaries 


In this section we cover the basic priciples of quantum computing needed to understand the content in the 
paper. Eor a much more complete overview there are many references available, e.g., 1KSV02[|NC00B . 

The state of an n-qubit quantum system is described by a unit vector inff = a 2"-dimensional 

complex Hilbert space. As per the literature we will denote the standard orthogonal basis vectors of Tf by 
{|n)} for V G {0,1}”. 
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In accordance with the laws of quantum mechanics, transformations of states are described by unitary trans¬ 
formations acting on %, where a unitary transformation over Tf is a linear transformation specified by a 
2” X 2” square complex matrix U, such that UU* = I, where U* is the conjugate transpose. Equivalently, 
the rows (and columns) of U form an orthonormal basis. A local unitary is a unitary that operates only on 
b = 0(1) qubits; i.e. after a suitable renaming of the standard basis by reordering qubits, it is the matrix 
U 0 l 2 n-b, where U is a 2^ X 2^ unitary U. A local unitary can be applied in a single step of a Quantum 
Computer. A local decomposition of a unitary is a factorization into local unitaries. We say a 2” x 2” unitary 
is efficiently quantumly computable if this factorization has at most poly{n) factors. 

We will need the concept of quantum evaluation of an efficiently classically computable function / ; 

{0,1}” —)■ {0,1}"^, which in one quantum query to / maps: 

1 ^) 1 ^)^ \x)\z®f{x)) 

xefo,!}" xefo,!}" 

Note that this is a unitary map, as applying it again inverts the procedure, and can be done efficiently as long 
as / is efficiently computable. 

Assuming / is {0, l}-valued, we can use this state together with a simple phase flip unitary gate to prepare: 

(-lyw ii)i/(.T)) 

xefo,!}" 

And one more quantum query to /, which “uncomputes” it, and allows us to obtain the state (—1)-^^^^ jx). 

xefo,!}" 

Equivalently, if the efficiently computable function is / : {0,1} —)■ {zhljwe can think of this as a procedure 
to prepare: 


fix)\x) 

xefo,!}" 


With two quantum queries to the function /. 


We close this section with an additional lemma needed for our quantum sampler. 


Lemma 1. Let h : [m] —)■ {0,1}*^ be an efficiently computable one-to-one function, and suppose its inverse 
can also be efficiently computed. Then the superposition ^ \h{x)) can be efficiently prepared by a 

xG[m] 


quantum algorithm. 


Proof. Our quantum procedure with two quantum registers proceeds as follows: 

1. Prepare ^ X) k)|00...0) 

a:S[m] 

2. Query h using the first register as input and the second as output: 



s/m 


\x)\h{x)) 

x£[m] 
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3. Query h ^ using the second register as input and the first as output: 


^ |x©/i ^{h{x)))\h{x)) = |00...0)|/i(x)) 


x^[rn\ 


x£[m] 


4. Discard first register 


□ 


4 Efficiently Specifiable Polynomial Sampling on a Quantum Computer 


In this section we describe a general class of distributions that can be sampled efficiently on a Quantum 
Computer. 

Definition 2 (Efficiently Specifiable Polynomial). We say a multilinear homogenous n-variate polynomial 
Q with coefficients in {0,1} and m monomials is Efficiently Specifiable via an efficiently computable, one- 
to-one function h : [m] —)• {0,1}*^, with an efficiently computable inverse, if: 

Q{Xi,X2...,Xn)= Y 

z&[m\ 

Definition 3 {T>Qy). Suppose Q is an Efficiently Specifiable polynomial with m monomials. For fixed Q 
and I, we define the class of distributions 'Dqy over i-ary strings y € [0, f' — 1]”^ given by: 


Pr [y] 


\QiZy)\^ 


Where Zy G T” is a vector of complex values encoded by the string y. 

Theorem 4 (Quantum Sampling Theorem), Given an Efficiently Specifiable polynomial, Q with n variables, 
m monomials, relative to a function h, and i ^ exp{n), the resulting T>Qy can be sampled in poly{n) time 
on a Quantum Computer. 


Proof. 


1. We start in a uniform superposition \z). 

2e[m] 

2. We then apply Lemma[T]to prepare Yh 


2e[m] 


3. Apply Quantum Fourier Transform over Z” to attain 

' E E 




yG[0,^— z^[m] 
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Notice that the amplitude of each y basis state in the final state after Step 3 is proportional to the value of 
Q{Zy), as, desired. 


□ 


5 Classical Hardness of Efficiently Specifiable Polynomial Sampling 


We are interested in demonstrating the existence of some distribution that can be sampled exactly by a uni¬ 
form family of quantum circuits, that cannot be sampled approximately classically. Approximate here means 
close in Total Variation distance, where we denote the Total Variation distance between two distributions X 
and y by ||X — y||. Thus we define fhe nofion of a Sampler fo be a classical algorifhm fhaf approximafely 
samples from a given class of disfribufions: 

Definition 5 (Sampler), Let {Tln}n>o be a class of distributions where each is distributed over C”. 
Let r{n) G poly{n),e{n) € l/poly{n). We say S is a Sampler with respect to {Dn} if 115(0”, x ~ 

e(n) in (classical) polynomial time. 

We firsl recall a fheorem due fo Sfockmeyer IISfo851 on fhe abilify fo “approximate counf” in fhe PH. 

Theorem 6 (Sfockmeyer HSfoSSI ). Given as input a function f : {0,1}” —)• {0,1}”* and y G {0,1}™, there 
is a procedure that outputs a such that: 

(1 - e) Pr [f{x) = y] ^ a ^ (1 + e) Pr [/(x) = y] 

In randomized time poly{n, 1/e) with access to an NP oracle. 

In fhis section we use Theorem 0 fogelher wifh fhe assumed existence of a Sampler for to obtain 
hardness consequences. 

In particular, we show that a Sampler would imply the existence of an efficient approximation to an Effi¬ 
ciently Specifiable polynomial in fhe following fwo confexfs: 

Definition 7 (e—additive ^-approximate solution). Given a distribution D over C” and P : C” —C we say 
T : C” —)• C is an e—additive approximate 6—average case solution with respect to D, to P : C” C, if 
Prxr^D[\T{x) - P{x)\ ^ e] ^ 1 - (5. 

Definition 8 (e—multiplicative J-approximate solution). Given a distribution D over C” and a function 
P : C” —)■ C we say T : C” —?■ C is an e—multiplicative approximate 5—average case solution with respect 
to D, ifFr^r.,D[\T{x) - P{x)\ ^ e|P(x)|] ^ 1 - S. 

These definitions formalize a notion that we will need, in which an efficient algorithm computes a particular 
hard function approximately only on most inputs, and can act arbitrarily on a small fraction of remaining 
inputs. 

In this section, we focus on the uniform distribution on {±1} strings, and a natural generalization: 


6 






Definition 9 (T^). Given £ > 0, we define the set where ujg, is a primitive i-th root 

of unity. 

We note that is just i evenly spaeed points on the unit eirele, and T 2 = {±1}- 

Theorem 10 (Complexity eonsequenees of Sampler), Given an Efficiently Specifiable polynomial Q with 
n variables and m monomials, and a Sampler S with respect to Eq^i, there is a randomized procedure 
T : C” —)■ C, an (e • m)—additive approximate 5—average case solution with respect to the uniform 
distribution over T”, to the \Q\^ function, that runs in randomized time poly{n, 1/e,1/5) with access to an 
NP oracle. 


Proof. We need to give a proeedure that outputs an em-additive estimate to the \Q\‘^ funetion evaluated 
at a uniform setting of the variables, with probability 1 — 5 over ehoiee of setting. Setting /3 = y|, sup¬ 
pose 5 samples from a distribution P'sueh that \\Vq^£ — V'\\ ^ (3. We let py be Prxig ^ [y] and be Prx)'[y]. 


Our proeedure pieks a uniformly ehosen eneoding of a setting y € [0,£ — 1]”, and outputs an estimate Qy. 

\QiZ 

Note that py = ■ Thus our goal will be to output a qy that approximates py within additive error 

in time polynomial in n, and 


We need: 


PT[\qy-Py\ 


First, define for eaeh y. Ay = \py — qy\, and so HHq/ — V'W = ^ 

y 


Note that: 


E[A,] 

^yl^y] = ^ 


£n 


And applying Markov’s inequality, V/c > 1, 


Pr[Ay > 

y 


k2/3 

~ffr 



Setting /c = |, /3 = 1^, we have. 


Pr[A^ > £ . J_1 < i 

y^ y 2 4 
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Then use approximate counting (with an NP oracle), using Theorem| 6 ]on the randomness of S to obtain an 
output Qy so that, for all 7 > 0 , in time polynomial in n and ^: 


P^lQy-Qyl > 1' Qy] < ^ 

Because we can amplify the failure probability of Stockmeyer’s algorithm to be inverse exponential. Note 
that: 


EQy 


1 


Thus, 


or ^ 

P/b. > pi < t 


Now, setting 7 = ^ and applying the union bound: 


PAlQy 


^ > 7 • Qy] + Pr[Aj; > I • 

1 1 (5 

^ T + TTT + T 


□ 


Now, as will be proven in Appendix |Bl the variance, Var [(^(A)], of the distribution over C induced by 
an Efficiently Specifiable Q with m monomials, evaluated at uniformly distributed entries over T" is m, 
and so the preceding Theorem [TOl promised us we can achieve an eVar [(5(X)]-additive approximation to 
Q^, given a Sampler. We now show that, under a conjecture, this approximation can be used to obtain a 
good multiplicative estimate to Q^. This conjecture effectively states that the Chebyshev inequality for this 
random variable is tight. 


Conjecture 1 (Anti-Concentration Conjecture relative to an n-variate polynomial Q and distribution V over 
C"^). There exists a polynomial p such that for all n and <5 > 0, 


\Q{x)? < 


Var[Q(X)]~ 
p{n,l/5) _ 


< 5 


Pr 

Xr~.V 






Theorem 11, Assuming Conjecture\I\ relative to an Efficiently Specifiable polynomial Q and a distribution 
T), an eVar [Q{X)]-additive approximate 5-average case solution with respect to D, to the \ Q\‘^ function can 
be used to obtain an e' ^ poly{n)e-multiplicative approximate 5' = 25-average case solution with respect 
to V to IQp. 

Proof Suppose A is, with high probability, an eVar [Q(X)]-additive approximation to \Q{X)\‘^, as guaran¬ 
teed in the statement of the Theorem. This means: 


Pr 

L 


A-|g(X)|2 >eVar[g(X)] 


< <5 


Now assuming Conjecture [U with polynomial p, we will show that A is also a good multiplicative approxi¬ 
mation to |g(X)p with high probability over X. 


By the union bound. 


Pr 

Xr~.V 


A-ig(x)i^ 

ep{n,l/5) 


> mxf 


^ Pr 

Xr^D 


Pr 


A-|g(X)|2 >eVar[g(X)] 
eVar [Q{X)] 


+ 


ep{n, 1/5) 


> \Q{x)y 


€ 25 


Where the second line comes from Conjecture [T] Thus we can achieve any desired multiplicative error 
bounds (e', 5') by setting 5 = 5'/2 and e = e'/p{n, 1/5). 


□ 


For the results in this section to be meaningful, we simply need the Anti-Concentration conjecture to hold 
for some Efficiently Specifiable polynomial that is ^j^P-hard to compute, relative to any distribution we can 
sample from (either Un, or k)^). We note that Aaronson and Arkhipov BAA 1311 conjectures the same 
statement as Conjecture[T]for the special case of the Permanent function relative to matrices with entries 
distributed independently from the complex Gaussian distribution of mean 0 and variance 1. 


Additionally, we acknowledge a result of Tao and Vu who show: 
Theorem 12 (Tao & Vu BTVOSlI ). For all e > 0 and sufficiently large n. 


Pr 


I Permanent [A] I < 



1 


Which comes quite close to our conjecture for the case of the Permanent function and uniformly dis¬ 
tributed {±1}"'^’^ = T 2 matrix. More specifically, for the above purpose of relating the additive hardness 
to the multiplicative, we would need an upper bound of any inverse polynomial 5, instead of a fixed 
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6 Sampling from Distributions with Probabilities Proportional to [—k^k] 
Evaluations of Efficiently Specifiable Polynomials 


In the prior sections we discussed quantum sampling from distributions in which the probabilities are propor¬ 
tional to evaluations of Efficiently Specifiable polynomials evaluafed af poinfs in T^. In Ibis secfion we show 
how fo generalize Ibis fo quanfum sampling from disfribufions in which fhe probabilifies are proporfional 
fo evaluations of Efficienlly Specifiable polynomials evaluafed af polynomially bounded infeger values. In 
particular, we show a simple way fo lake an Efficienlly Specifiable polynomial wilh n variables and create 
anolher Efficienlly Specifiable polynomial wilh kn variables, in which evalualing Ihis new polynomial af 
{ — 1 , is equivalenl fo evaluation of fhe old polynomial af [—k, 

Definition 13 (A:-valued equivalenl polynomial). For every Efficiently Specifiable polynomial Q with m 
monomials and every fixed k > 0 consider the polynomial Q'j^ : —)■ R defined by replacing each 

variable Xi in Q with the sum of k new variables + xf'^ + ... -I- x[^\ We will call Q'^ the k-valued 
equivalent polynomial with respect to Q. 


Note lhal a uniformly chosen {±1} assignmenl fo fhe variables in induces an assignmenl fo fhe variables 
in Q, dislribufed from a dislribulion we call B{0, k): 


Definition 14 (8(0, k)). For k a positive integer, we define the distribution B{0, k) supported over the odd 
integers in the range [—k, k] (ifk is odd), or even integers in the range [—k, k] (ifk is even), so that: 


Pr [ 

B(0,fe) 


( 4 .) 

2 ^ 

0 


if y and k are both odd or both even 

otherwise 


Theorem 15. Given an Efficiently Specifiable polynomial Q with n variables and m monomials, let Q'^ be 
its k-valued equivalent polynomial. For all I < exp{n), we can quantumly sample from the distribution 
poly{n, k). 


Proof. Our proof follows from the following lemma, which proves that Q'j^ is Efficiently Specifiable. 

Lemma 16. Suppose Q is an n-variate, homogeneous degree d Efficiently Specifiable polynomial with m 
monomials relative to a function h : [m] —)■ {0,1}"^. Let k ^ poly{n) and let Q'^ be the k-valued equivalent 
polynomial with respect to Q. Then Q'^ is Efficiently Specifiable with respect to an efficiently computable 
function h' : [m] x [kY {0,1}^"'. 


Proof. We first define and prove that h' is efficiently computable. We note that if there are m monomials in 
Q, there are mk'^ monomials in Q'. As before, weTl think of the new variables in as indexed by a pair 
of indices, a “top index” in [k] and a “bottom index” in [n] . Equivalently we are labeling each variable in 
Q'l^ as x\^\ the y-th copy of the f-th variable in Q. We are given x G [m] and yi,y 2 , ■■■lUd £ [k]. Then, for 
all i G [n] and j G [k], we define the output, z = h'{x, yi, 2 / 2 , •••, yd)i,j = 1 iff: 

1 . h{x)i = 1 

2. If h{x)i is the £ ^ d-th non-zero element of h{x), then we require y^ = j 
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We will now show that h'~^ is efficiently computable. As before we will think of 2 ; G {0,as being 
indexed by a pair of indices, a ‘top index” in [k] and a “bottom index” in [n]. Then we compute h'~^{z) by 
first obtaining from 2 ; the bottom indices ji,j 2 , and the corresponding top indices, ii, ^ 2 , ■••Ad- Then 
obtain from the bottom indices the string x G {0,1}” corresponding to the indices of variables used in Q 
and output the concatenation of h~^{x) and ji,j 2 , 

□ 

Theorem [15] now follows from Lemma [T^ where we established that is Efficiently Specifiable, and 
Theorem m where we established that we can sample from / quantumly. □ 

Theorem 17. Let Var [(^(Ai)] = Var \Q{Xi,X 2 , Ai„)] denote the variance of the distribution over R 
induced by Q with assignments distributed from Bf), k)”. Given a Sampler S with respect to 'Dqi^ 2 ’ 
find a randomized procedure T : R"^ —?• R, an eVar [Q{X)]-additive approximate 5-average case solution 
to with respect to B{0, /c)” that runs in time poly{n, 1/e, 1/5) with access to an NP oracle. 


Proof We begin by noting that Q'j. is a polynomial of degree d that has kn variables and m' = mk^ mono¬ 
mials. By Theorem [To] we get that a Sampler with respect to ^ implies there exists A, an em'-additive 

approximate 5-average case solution to Q'^ with respect to that runs in time poly{n, 1/e, 1/5) with 

access to an NP oracle. We need to show the existence of an A', an em'-additive approximate 5-average 
case solution to Q'^ with respect to the ^8(0, k)” distribution. 

We think of A! as receiving an input, 2 ; G [—k, k\^ drawn from 8(0, A;)”. A! picks y uniformly from the 
orbit of 2 ; over {±1}*^'' and outputs A{y). Now: 


Pr [U'(-2) - Q‘^iz)\ ^ em'l 


or 021(2:) 

Pr [|A(y) - Q'k{y)\ ^ em'] ^1-5 

\fen 


( 1 ) 

( 2 ) 

(3) 


Thus, because a uniformly chosen {±1}^'' assignment to the variables in Q'j^ induces a 8(0, k)"^ distributed 
assignment to the variables in Q, this amounts to an em'-additive approximate 5-average case solution to 
with respect to 8(0, k)'^. In Appendix iBl we prove that Var [(5(V)] is m' as desired. □ 


7 The “Squashed” QFT 


In this section we begin to prove that Quantum Computers can sample efficiently from distributions with 
probabilities proportional to evaluations of Efficiently Specifiable polynomials at points in [—k. A:]" for 
k = exp{n). Note that in the prior quantum algorithm of Section |4| we would need to invoke the QET over 
of dimension doubly-exponential in n. Thus we need to define a new Polynomial Transform that can 
be obtained from the standard Quantum Eourier Transform over which we refer to as the “Squashed 
QET”. Now we describe the unitary matrix which implements the Squashed QET. 
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Consider the 2^ x 2^ matrix Dk, whose eolumns are indexed by all possible 2^ multilinear monomials of the 
variables xi,X 2 , ■■■, Xk and the rows are indexed by the 2^ different {—1, +1} assignments to the variables. 
The (r,y)-th entry is then defined to be the evaluation of the j-th monomial on the i-th assignment. We 
note in passing that, defining Dk fo be fhe mafrix whose enfries are fhe enfries in Dk normalized by 1/ 
gives us fhe Quanfum Fourier Transform mafrix over Z^. If is elear, by fhe unifarify of fhe Quanfum Fourier 
Transform, fhaf fhe eolumns (and rows) in Dk are pairwise orfhogonal. 

Now we define fhe “Elemenfary Symmefrie Polynomials”: 

Definition 18 (Elemenfary Symmefrie Polynomials). We define the j-th Elementary Symmetric Polynomial 
on k variables for j G [0, /c] to be: 

p,{Xi,X2,...,Xk)= Y. Xe,Xe,...X,^ 


In fhis work we will eare parfieularly abouf fhe firsl fwo elemenfary symmefrie polynomials, pq and pi whieh 
aredefinedaspo(-^i,^2,--,-^fc) = 1 andpi(Xi,X2,...,Xfc) = ^ X^. 

Consider fhe (A: + 1) x (/c + 1) mafrix, Dk, whose eolumns are indexed by elemenfary symmefrie poly¬ 
nomials on k variables and whose rows are indexed by equivalenee elasses of assignmenfs in Z 2 under Sk 
symmefry. We obfain Dk from Dk using fwo steps. 

Eirsf obfain a 2^ x (A: + 1) reefangular mafrix D^^^ whose rows are indexed by assignmenfs fo fhe variables 
xi,X2, ■■■,Xk G {±1}^ and eolumns are fhe enfry-wise sum of fhe enfries in eaeh eolumn of Dk whose 
monomial is in eaeh respeefive elemenfary symmefrie polynomial. 

Then obfain fhe final (A: +1) x (A: +1) mafrix Dk by faking D^^^ and keeping only one represenfafive row in 
eaeh equivalenee elass of assignmenfs under Sk symmefry. We label fhe equivalenee elasses of assignmenfs 
under Sk symmefry oq, oi, 02 ,..., and note fhaf for eaeh i G [A:], \oi\ = (^). Observe fhaf Dk is preeisely 
fhe mafrix whose (f, j)-fh enfry is fhe evaluation of fhe j-fh symmefrie polynomial evaluafed on an assign- 
menf in fhe f-lh symmefry elass. 


Theorem 19. The columns in the matrix D^^ are pairwise orthogonal. 

Proof. Note fhaf eaeh eolumn in fhe mafrix D^^^ is fhe sum of eolumns in Dk eaeh of whieh are orfhogonal. 
We ean prove Ibis fheorem by observing fhaf if we lake any fwo eolumns in D^j^\ ealled ci, C 2 , where ci is 
fhe sum of eolumns {rtj} of Dk and C 2 is fhe sum of eolumns {vi] of Dk. The inner produel, (ci, C 2 ) ean be 
written: 

i j i,j 


□ 
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Theorem 20. Let L be the (k + l) x (k + 1) diagonal matrix with i-th entry equal to yjol. Then the columns 
of L ■ Dk are orthogonal. 


Proof. Note that the value of the symmetrie polynomial at eaeh assignment in an equivalenee elass is the 
same. We have already eoneluded the orthogonality of eolumns in . Therefore if we let a and b be any 
two eolumns in the matrix Dk, and their respeetive eolumns be d, 6 in D^i}\ we ean see: 


k 2*= 

{aibi\oi\) = '^dibi = 0 
2 = 0 2=0 


From this we eonelude that the eolumns of the matrix L 
,/di, are orthogonal. 


Dk, in whieh the i-th row of D^, is multiplied by 

□ 


Theorem 21, We have just established that the columns in the matrix L ■ Dk are orthogonal. Let the 
k + 1 X k + 1 diagonal matrix R be such that so that the columns in L ■ Dk • R are orthonormal, and 
thus L ■ Dk ■ R is unitary. Then the first two nonzero entries in R, which we call ro, ri, corresponding to 
the normalization of the column pertaining to the zero-th and first elementary symmetric polynomial, are 
1 / and 

i=0 


Proof. First we ealeulate vq. Sinee we wish for a unitary matrix, we want the £2 norm of the first eolumn of 
Dk to be 1, and so need: 


k 





= 1 


And so ro is 1/as desired. 


Now we ealeulate ri, the normalization in the eolumn of Dk eorresponding to the first elementary symmetrie 
polynomial. Note that in i-th equivalenee elass of assignments we have exaetly i negative ones and k — i 
positive ones. Thus the value of the first symmetrie polynomial is the sum of these values, whieh for the 


i — th equivalenee elass is preeisely k — 2i. Then we note the normalization in eaeh row is 
have 


T 

i=0 L 



1 2 


{k — 2i) 


= 1 



. Thus we 


Thus ri 



as desired. 


□ 
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8 Using our “Squashed QFT” to Quantumly Sample from Distributions of 
Efficiently Specifiable Polynomial Evaluations 


In this section we use the unitary matrix developed earlier to quantumly sample distributions with probabil¬ 
ities proportional to evaluations of Efficiently Specifiable polynomials at points in [—k, kY' for k = exp{n). 
Here we assume that we have an efficient quantum circuit decomposition for this unitary. The prospects for 
this efficient decomposition are discussed in Section [TOl 


For convenience, we’ll define a map Y : [—k, k] [0, k], for k even, with 

Mv) = { ^ if y is even 
\ 0 otherwise 

Definition 22. Suppose Q is an Efficiently Specifiable polynomial Q with n variables and m monomials, 
and, for k ^ exp{n), let Q'^, be its k-valued equivalent polynomial. Let Var [Q(X)] be the variance of the 
distribution over M induced by Q with assignments to the variables distributed over B{0, /c)” (or equiva¬ 
lently, we can talk about Yax [QY where each variable in is independently uniformly chosen from {±l}j, 
as calculated in Appendix\B\ Then we define the of distribution Eq^k over n tuples of integers in [—k, k] by: 

2^-Var[g(X)] 

Theorem 23. By applying (L ■ in place of the Quantum Fourier Transform over Section^ 

we can efficiently quantumly sample from Eq^k- 


Proof Since we are assuming Q is Efficiently Specifiable, let h : [m] —)■ {0,1}” be the invertible function 
describing the variables in each monomial. We start by producing the state over k 1 dimensional qudits: 



y/m 


2e[m] 


Which we prepare via the procedure described in Eemma[T] 


Instead of thinking of h as mapping an index of a monomial from [m] to the variables in that monomial, we 
now think of h as taking an index of a monomial in Q to a polynomial expressed in the { 1 , xA) ^( 2 ) -p 
... + x^^Y^ basis. 


Now take this state and apply the unitary (which we assume can be realized by an efficient quantum circuit) 
{L-bk- R)^^. 


Notice each y G [—k, kY has an associated amplitude: 




r-n-d . 

'O ' 


m 
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Letting py = Pi’Dq [y], note that, by plugging in ro, ri from Section I?) 


m 

{^iy2)) - i^tyn)) 


al = 


m2Hn-d) ^ _ 2i) 

Vi=0 L 

k \{ k 


^(2/)^U(yi))(v’(y2))"-U(yn)) _ ^(^)^U(?/l))U(y2))-"U(yn)) 


2fcn-fc<ivar [Q(X)]2“ 


2'^’^Var [g(X)] 




□ 


9 The Hardness of Classical Sampling from the Squashed Distribution 

In this section, as before, we use Stockmeyer’s Theorem (Theorem |^, together with the assumed existence 
of a Sampler for Vq ^ to obtain hardness consequences for classical sampling with k ^ exp{n). 

Theorem 24. Given an Efficiently Specifiable polynomial Q with n variables and m monomials, let Q'j^ be its 
k-valued equivalent polynomial, for some fixed k ^ exp{n). Suppose we have a Sampler S with respect to 
our quantumly sampled distribution class, 'Dq i^, and let Var [Q{Xy\ denote the variance of the distribution 
over M induced by Q with assignments distributed from Bf), kffi. Then we can find a randomized procedure 
T : —)• M, an eVar [Q{X)]-additive approximate 6-average case solution to with respect to B(0, kffi 

that runs in time poly{n, 1/e, 1/5) with access to an NP oracle. 

Proof Setting /3 = e5/16, suppose S samples from a class of distributions V so that — T)' II ^ /3- 

Let qy = Prx)'[y]. 


We define f : {±1}^” —^ [—k, k]^ to be the map from each {±1}^"^ assignment to its equivalence class of 
assignments, which is n blocks of even integral values in the interval [—k, k]. Note that, given a uniformly 
random {±1}^” assignment, f induces the B{0, k) distribution over [—k, kY'. 


Our procedure picks a y G [—fc, kY distributecil via B{Q, kY, and outputs an estimate qy. Equivalently, we 
analyze this procedure by considering a uniformly distributed x G {±1}^” and then returning an approxi¬ 
mate count, q^(x) to (lcj>[x)- We prove that our procedure runs in time poly{n, 1/e, 1/5) with the guarantee 
that: 


Pr 

X 


\Q(j){x) P(l){x)\ 





^5 


^We can do this when k = exp{n) by approximately sampling from the Normal distribution, with only poly{n) bits of random¬ 
ness, and using this to approximate B(0, k) to within additive error l/poly{n) e.g., IBM58llBer41l . 
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And by our above analysis of the quantum sampler: 


P(l){x) 


Uwx)„)) 

2^’*Var [Q(X)] 


Note that: ^ ^ \py — qy\ ^ P, which, in terms of x, because we are summing over all strings in the 

orbit under (Sk)"' symmetry, can be written: 

_ \P<P{^) ~ I _ ^ o 

2 / V / ^ \/ \ ' 


First we define for each x. Ax = ^ — b</>(a;)^ <}</>(x )\ —^^ \\T>Q,k — T^'W = 


Note that: 


E 


EAx 

X 

2^kn 


^kn 


And applying Markov, Vj > 1, 


Setting j = |, /? = ||, we have. 


> i?i < 


1 

j 


Pr[A^ > £ . ^1 < ^ 
22^" 4 


Then use approximate counting (with an NP oracle), using Theorem|^on the randomness of S to obtain an 
output Qy so that, for all 7 > 0 , in time polynomial in n and ^: 


^A\Qy-Qy\ > 1' Qy] < ^ 

Because we can amplify the failure probability of Stockmeyer’s algorithm to be inverse exponential. 
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Equivalently in terms of x\ 


Pr 

X 


\Q 4 >{x) 9 </)(a;)l ^ Q.<p(x) 



And we have: 


E 


X 


Qif){x) 


. {ip{(j>{x)i)) {rp{(p{x) 2 )) '"irpi4>{x)„)) _ 




E 


Q4’(x) 

2kn 


1 

2kn 


Thus, by Markov, 


Pr[ 


Q<f>(x) 


ilp{tj){x)l)) i.ip{<j>{x) 2 )J "'yrpi4’{x)n)J 


k \ f k 


> 


J 


1 

2kni ^ j 


Now, setting 7 = ^ and applying the union bound: 


Pr 

X 


|90(a;) P<f>{x) 


> 


U k W k \ ( k \ 2^^ 

x) Qlj){x) I 


^ Pr 


^ Pr 

X 


+ Pr 


e 1 

k \ / k \ / k ^^2 2^*' 


L (i/>(</>(x)i)) {^{4>{x) 2)) ‘"i'ip{4){x)„)) 

Q(f>{x) 

. {tp(<f>{x)l)) ('l/)((/>(x) 2 )) '"i'lf>{lf)(x)„)) 
l^</>(x) ~ Q(j){x) I 


+ Pr 

X 


x) 


P<p(x) 


e 1 

k \ { k \ / k ^ ^ 2 2^^ 


L {'lp{(f>{x)i)) {^{(l}{x)2)) '''i'lp{(p{x)n)) 


> 


2kn 


> 7 * 


Q(p{x) 


L (l/’(<?^(x)l)) {ip{4){x)2)) '''ii^{(p{x)n)) iip{<l){x)l)) {ip{4){x)2)) '''i'lp{(f>{x)n)) 

1 1 (5 

1 

^ - H-^ (5. 

2 2" 


+ Pr 


Ax > 


e 1 

2 ' E" 


□ 


10 Putting it All Together 


In this seetion we put our results in perspeetive and eonelude. 
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As mentioned before, our goal is to find a class of distributions {'Dn}n>o that can be sampled exactly in 
poly{n) time on a Quantum Computer, with the property that there does not exist a (classical) Sampler 
relative to that class of distributions, {Pn}n>o- 

Using the results in Sections [5] and |6] we can quantumly sample from a class of distributions {'DQ^k}n>o, 
where k € poly{n) with the property that, if there exists a classical Sampler relative to this class of dis¬ 
tributions, there exists an eVar [Q(X)]-additive 5-average case solution to the function with respect to 
the B{0, fc)" distribution. If we had an efficient decomposition for the “Squashed QFT” unitary matrix, we 
could use the results from Sections [8] and |9] to make k as large as exp(n). We would like this to be an 
infeasible proposition, and so we conjecture: 

Conjecture 2. There exists some Efficiently Specifiable polynomial Q with n variables, so that eVar [Q(X)]- 
additive 5-average case solutions with respect to B{0,k)^, for any fixed k < exp{n), to Q^, cannot be 
computed in (classical) randomized poly{n, 1/e, 1/5) time with a PH oracle. 


At the moment we don’t know of such a decomposition for the “Squashed QFT”. However, we do know 
that we can classically evaluate a related fast (time n log^ n) polynomial transform by a theorem of Driscoll, 
Healy, and Rockmore tDJR97l . We wonder if there is some way to use intuition gained by the existence of 
this fast polynomial transform to show the existence of an efficient decomposition for our “Squashed QFT”. 

Additionally, if we can prove the Anti-Concentration Conjecture (Conjecture [U relative to some Efficiently 
Specifiable polynomial Q and fhe B{0, k)^ disfribufion, we appeal fo Theorem[TT]lo show fhaf if suffices fo 
prove: 

Conjecture 3. There exists some Efficiently Specifiable polynomial Q with n variables, so that Q satisfies 
Conjecture U} relative to B{0,k)^, for k ^ exp(n), and e-multiplicative 5-average case solutions, with 
respect to B(0, k)^, to cannot be computed in (classical) randomized poly{n, 1/e, 1/5) time with a PH 
oracle. 


We would be happy fo prove fhaf eifher of fhese fwo solutions (additive or mulfiplicafive) are #P-hard. In 
fhis case we can simply invoke Toda’s Theorem llTod9Hl fo show fhaf such a randomized classical solution 
would collapse PH fo some finite level. 

We nofe fhaf af presenf, bofh of fhese conjecfures seem ouf of reach, because we do nof have an example of 
a polynomial fhaf is ^^tP-hard fo approximafe (in eifher mulfiplicafive or addifive) on average, in fhe sense 
fhaf we need. Hopefully fhis is a consequence of a failure of proof techniques, and can be addressed in fhe 
fufure wifh new ideas. 
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A The Power of Exact Quantum Sampling 

For the sake of completeness, in this section we prove a folklore result (that is implicit in e.g., BAarlllO 
showing that, unless the PH collapses to a finite level, there is a class of distributions that can be sampled 
efficiently on a Quantum Computer, that cannot be sampled exactly classically. 

Note that as a consequence of Theorem!^ given an efficiently computable / : {0,1}"^ {0,1} we can 



compute a multiplicative approximation to Pr^;..., [/(x) = IJ = -in the PH. 


Now we show the promised class of quantumly sampleable distributions: 

Definition 25 (P/). Given f : {0,1}” ^ {3=1}. we define the distribution Vf over {0,1}” as follows: 



The fact that this is a distribution will follow from the proceeding discussion. 

Theorem 26. For all efficiently computable f : {0,1}" {3=1} we can sample from T>f in poly{n) time 

on a Quantum Computer. 

Proof Consider the following quantum algorithm: 


1. Prepare the uniform superposition overn qubits, |x) 


2. Since by assumption / is efficiently computable, we can apply / to the phases (as discussed in Section 
[3]l, with two quantum queries to / resulting in: 


1/) = ^ E 


xefo,!}" 
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3. Apply the n qubit Hadamard, 

4. Measure in the standard basis 

Note that = -^ therefore the distribution sampled by the 

?/e{0,l}" a;e{0,l}" 

above quantum algorithm is P/. □ 

f ^ 

As before, the key observation is that ((00...0|P®'^|/))^ = -Z_ and therefore encodes a #P- 

hard quantity in an exponentially small amplitude. We can exploit this hardness classically if we assume 
the existence of a classical sampler, which we define to mean an efficient random algorithm whose output is 
distributed via this distribution. 

Theorem 27 (Folklore, e.g., BAarllll ). Suppose we have a classical randomized algorithm B, which given 
as input {P, samples from Bf in time poly {n), then the PH collapses to BPP^^. 


Proof. The proof follows by applying Theorem l^to obtain an approximate count to the fraction of random 
strings r so that BfB, r) = 00..0. Formally, we can output an a so that: 


( 1 - 6 ) 



22n 




E 


f{x) 


22r. 


(1 + e) 


In time poly{n, 1/e) using an NP oracle. Multiplying through by 2^” allows us to get a multiplicative 

f V 

approximation to ^ /(x) in the PH. It is clear that, given efficiently computable / : {0,1}"^ 

{±1} computing ^ f{x) is #P-hard. Aaronson BAarllH has shown that even calculating this relative 

a;e{0,l}" 

error estimate to | f{x) j is ^P-hard. Since we know by Toda’s Theorem IITod91L PH C P#^, 

Vxefo,!}" / 

we now have that P#^ C BPP^^ PH C BPP^^ leading to our theorem. Note also that this theorem 
would hold even under the weaker assumption that the sampler is contained in BPP^^. □ 


We end this Section by noting that Theorem |27] is extremely sensitive to the exactness condition imposed 
on the classical sampler, because the amplitude of the quantum state on which we based our hardness is 
only exponentially small. Thus it is clear that by weakening our sampler to an “approximate” setting in 
which the sampler is free to sample any distribution Y so that the Total Variation distance ||y — Py|| ^ 
l/poly{n) we no longer can guarantee any complexity consequence using the above construction. Indeed, 
this observation makes the construction quite weak- for instance, it may even be unfair to demand that any 
physical realization of this quantum circuit itself samples exactly from this distribution! In the preceding 
sections we are motivated by this apparent weakness and discuss the intractability of approximately sampling 
in this manner from quantumly sampleable distributions. 
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B Computation of the Variance of Efficiently Specifiable Polynomial 


In this section we compute the variance of the distribution over M induced hy an Efficiently Specifiable 
polynomial Q wifh assignmenfs fo fhe variables chosen independenfly from fhe B{0,k) disfribufion. We 
will denofe Ibis fhroughoul fhe section by Var [Q{X)]. Recall, by fhe definilion of Efficienlly Specifiable, 
we have fhaf Q is an n variate homogenous mulfilinear polynomial wifh {0,1} coefficienls. Assume Q is 
of degree d and has m monomials. Eel each [—k, k] valued variable Xi be independenfly dislribuled from 
B{0,k). 

We adopl fhe nolalion whereby, for j G [m], I G [d], Xj^ is fhe l-th variable in fhe j-lh monomial of Q. 

m d 

Using fhe nolalion we can express Q{Xi,Xn) = X] 0 ^jv independence of Ihese random variables 

3 = 1 l=l 

and since Ihey are mean 0, if suffices lo compule fhe variance of each monomial and mulliply by m\ 


m d 

1 m 

~ d 


Var [Q(A)] = Var [Q(Vi,..., V,)] = E 

II 

M 

nv 

(4) 

J=i 1=1 

J 3 = 1 

.1=1 


■ d 

d 



= mE nv 

J=1 

= mJjE 

i=i 


(5) 


= m(E[x2J)‘' (6) 


Now since Ihese random variables are independenf and idenfically dislribuled, we can calculate fhe variance 
of an arbilrary Xj^ for any j G [m] and I £ [d\: 

= (*)1 m 

i=0 L \ /J 

( 8 ) 

Thus, fhe variance of Q is: 

If will be useful lo calculate Ihis variance in a differenl way, and oblain a simple closed form. In Ihis way we 
will consider Ihe /c-valued equivalenl polynomial Q'f, : —)■ M which is a sum of m' = mk^ multilinear 

m' d 

monomials, each of degree d. As before we can write Q'f^{Xi, ...^X^k) = X] 0 ^ji ■ Note lhal Ihe uniform 

i=iz=i 

dislribulion over assignmenls in lo Q'l^ induces B{0, k)'^ over [—k, kY assignmenfs lo Q. By Ihe same 
argumenl as above, using symmelry and independence of random variables, we have: 


22 



(9) 


Yar[Q{X)]=Yai[QiXi,X 2 ,...,Xn)] =Var X 2 , 

d 

= m'llE[xl] ( 10 ) 

i=i 

= m'E = I'^m' = m' = k^m (11) 


C Examples of Efficiently Specifiable Polynomials 


In this section we give two examples of Efficiently Specifiable polynomials. 

n 

Theorem 28. Permanent (xi,x„ 2 ) = Yh Y\ is Efficiently Specifiable. 

adSn *=1 


Proof We note fhaf if will be convenienf in fhis section fo index sfarfing from 0. The fheorem follows from 
fhe exisfence of an /^permanent : [0, n! — 1] —)• {0,1}"^ fhaf efficienlly maps fhe z-fh permufafion over n 
elemenfs fo a siring representing ifs obvious encoding as an n x n permufafion malrix. We will prove fhaf 
such an efficienlly compulable ^Permanent exisls and prove fhaf ifs inverse, ^Permanent efficienlly 

compufable. 


The exisfence of ^permanent follows from fhe so-called “facforial number syslem” IIKnu73L which gives 
an efficienf bijeclion fhaf associates each number in [0, n! — 1] wilh a permufafion in Sn- It is customary to 
think of the permutation encoded by the factorial number system as a permuted sequence of n numbers, so 
that each permutation is encoded in n log n bits. However, it is clear that we can efficiently transform this 
notation into the n x n permutation matrix. 

To go from an integer j G [0, n! — 1] to its permutation we: 

1. Take j to its “factorial representation”, an n number sequence, where the z-th place value is associated 

with (z — 1)!, and the sum of the digits multiplied by the respective place value is the value of the 
number itself. We achieve this representation by starting from (rz — 1)!, setting the leftmost value 
of the representation to j' = letting the next value be continuing until 0. 

Clearly this process can be efficiently achieved and efficiently inverted, and observe that the largest 
each value in the z-th place value can be is z. 

2. In each step we maintain a list £ which we think of as originally containing n numbers in ascending 
order from 0 to n — 1. 

3. Repeat this step rz times, once for each number in the factorial representation. Going from left to 
right, start with the left-most number in the representation and output the value in that position in the 
list, £. Remove that position from £. 

4. The resulting rz number sequence is the encoding of the permutation, in the standard rz log rz bit en¬ 
coding 
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□ 


Now we show that the Hamiltonian Cyele Polynomial is Effieiently Speeifiable. 

Given a graph G on n vertiees, we say a Hamiltonian Cyele is a path in G that starts at a given vertex, visits 
eaeh vertex in the graph exaetly onee and returns to the start vertex. 

We define an n-eyele to be a Hamiltonian eyele in the eomplete graph on n vertiees. Note that there are 
exaetly (n — 1)! n-eyeles in Sn- 

n 

Theorem 29. HamiltonianCycle (xi,..., x„ 2 ) = ^ Y\ Xi ,j{i) is Efficiently Specifiable. 

a: n—cycle 2=1 


Proof. We ean modify the algorithm for the Permanent above to give us an effieiently eomputable line '■ 

[ 0 , (n — 1 )! — 1 ] —)• { 0 , 1 }” with an effieiently eomputable 

To go from a number j G [ 0 , (n — 1 )! — 1 ] to its n-eyele we: 

1 . Take j to its faetorial representation as above. Now this is an n — 1 number sequenee where the i-th 
plaee value is assoeiated with (i — 1 )!, and the sum of the digits multiplied by the respeetive plaee 
value is the value of the number itself. 

2. In eaeh step we maintain a list i whieh we think of as originally eontaining n numbers in aseending 
order from 0 to n — 1 . 

3. Repeat this step n — 1 times, onee for eaeh number in the faetorial representation. First remove the 
smallest element of the list. Then going from left to right, start with the left-most number in the 
representation and output the value in that position in the list, £. Remove that position from 1. 

4. We output 0 as the n-th value of our n-eyele. 

To take an n-eyele to a faetorial representation, we ean easily invert the proeess: 

1. In eaeh step we maintain a list £ whieh we think of as originally eontaining n numbers in order from 
0 to n — 1 . 

2. Repeat this step n — 1 times. Remove the smallest element of the list. Going from left to right, start 
with the left-most number in the n-eyele and output the position of that number in the list £ (where 
we index the list starting with the 0 position). Remove the number at this position from £. 


□ 


D A Simple Example of “Squashed” QFT, for k = 2 

In this Seetion we explieitly eonstruet the matrix L- D 2 - R from the QFT over Z|. Note that the matrix we 
referred to as D 2 is: 
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/II 1 1 \ 

1 - 11-1 
1 1 - 1-1 
V 1 -1 -1 1 / 

Where we ean think of the eolumns as identified with the monomials { 1 , xi,X2,xiX2} in this order (from left 
to right) and the rows (from top to bottom) as identified wifh fhe assignmenfs {( 1 , 1 ), (— 1 , 1 ), ( 1 , — 1 ), (— 1 , — 
where fhe firsf elemenf in eaeh pair is fhe assignmenf fo xi and fhe seeond is fo X2- Nofe fhaf as desired, fhe 
(/j)-fh elemenf of D2 is fhe evaluation of fhe j-fh monomial on fhe i-fh assignmenf. 

Now we ereafe by eombining eolumns of monomials fhaf belong fo eaeh elemenfary symmefrie poly¬ 
nomial, as deseribed in fhe prior seefion. We identify fhe eolumns wifh elemenfary symmefrie polynomials 
on variables xi, X2 in order from lefl fo righf: 1 , xi -|- X2, X1X2 and fhe rows remain fhe same. This gives us: 


/ 1 2 1 \ 

1 0 -1 

1 0 -1 

V 1 -2 1 / 

If ean easily be verified fhaf fhe eolumns are still orfhogonal. Now we nofe fhaf fhe rows eorresponding fo 
assignmenfs ( 1 ,- 1 ) and (— 1 , 1 ) are in fhe same orbif wifh respeef fo S2 symmefry. And fhus we obfain D2: 



Now L is fhe diagonal mafrix whose i-fh enfry is y^, fhe size of fhe z-fh equivalenee elass of assignmenfs 
under S2 symmefry. Nofe fhaf |oo| = |oi| = and I02I = and so L is: 


1 

0 

0 


0 0 \ 
V2 0 
0 1 j 


And L ■ £>2 = 


(12 1 \ 

\/2 0 - x/2 

V 1 -2 1 / 


And we nofe fhaf fhe eolumns are now orfhogonal. As before, fhis implies fhere exisfs a diagonal mafrix R 
so fhaf L ■ D2 ■ Ris unifary. If is easily verified fhaf fhis is fhe mafrix R: 


1 

2 


0 

0 


0 

1 

78 

0 


0 

0 

1 

2 


1 )} 
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And the first two elements ro, ri ean be easily seen to be -^= = ^ and 


in the prior seetion. Thus the final /c + 1 x fe + 1 mafrix L ■ D2 ■ R is: 




1 

V8’ 


( ^ 

El 


2 

0 

2 



\ 

/ 


Whieh is unifary, as desired. 


as elaimed 
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